Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/8cdbc5-9365-4a0c-b9a3-ae7746f09630/1/vfo6-DmqHc51j0ieLTGuIgkvyZo.mft
File:                     vfo6-DmqHc51j0ieLTGuIgkvyZo.mft (raw, json)
Hash identifier:          O9yQtEhkwWn79h7nXJZozG2oMETrDdUbp3D4ALWE9kw=
Subject key identifier:   EB:57:3E:5C:C2:03:7B:62:C2:CD:9E:73:EB:F8:38:79:CC:70:92:78
Authority key identifier: BD:FA:3A:F8:39:AA:1D:CE:75:8F:48:9E:2D:31:AE:22:09:2F:C9:9A
Certificate issuer:       /CN=bdfa3af839aa1dce758f489e2d31ae22092fc99a
Certificate serial:       0198D8F26D429A0A7FF08ED1BD65C6FF8A04
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vfo6-DmqHc51j0ieLTGuIgkvyZo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/8cdbc5-9365-4a0c-b9a3-ae7746f09630/1/vfo6-DmqHc51j0ieLTGuIgkvyZo.mft
Manifest number:          164F
Signing time:             Sat 23 Aug 2025 22:00:22 +0000
Manifest this update:     Sat 23 Aug 2025 22:00:22 +0000
Manifest next update:     Sun 24 Aug 2025 22:00:22 +0000
Files and hashes:         1: 02L_0yvjrj7KDTzjU6X6m1mtpQI.roa (hash: n98M+U3c1grhlxXcswrUg59R80vb+hM1RgpHM3qQuPY=)
                          2: 7C0Ptfd131vRO631WH816-TiLmM.roa (hash: vVG6CyuAsSWdSPh0xSG091fPSEug6kwYq/eGfl7DFQA=)
                          3: LDkoUP_y05Q4menYaO8UkXEB7c4.roa (hash: KlbVBac/f0Y5FEisWs64/Ycn/xUCteAxkti9GeZFBNk=)
                          4: qrNw_4pWdm_geFtfy5BpF6RB3Lw.roa (hash: QyClSiOoVb03SqPau0rHxsvXZNW+BEw2UB08FmFuOP0=)
                          5: vfo6-DmqHc51j0ieLTGuIgkvyZo.crl (hash: O4XQh8+REG1mlZyHuNvVTmOMOje7GxHt1+hgncj1Sms=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/8cdbc5-9365-4a0c-b9a3-ae7746f09630/1/vfo6-DmqHc51j0ieLTGuIgkvyZo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/8cdbc5-9365-4a0c-b9a3-ae7746f09630/1/vfo6-DmqHc51j0ieLTGuIgkvyZo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vfo6-DmqHc51j0ieLTGuIgkvyZo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Aug 2025 22:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:98:d8:f2:6d:42:9a:0a:7f:f0:8e:d1:bd:65:c6:ff:8a:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bdfa3af839aa1dce758f489e2d31ae22092fc99a
        Validity
            Not Before: Aug 23 22:00:22 2025 GMT
            Not After : Aug 24 22:00:22 2025 GMT
        Subject: CN=eb573e5cc2037b62c2cd9e73ebf83879cc709278
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:21:91:08:ec:b4:ab:76:3e:88:e6:d2:a5:8e:
                    c4:17:d2:da:9e:e7:d2:af:ad:48:b1:a3:c4:f9:9d:
                    5c:35:ed:57:fb:11:e1:d3:03:fa:b0:db:09:47:4e:
                    10:eb:1a:9d:a0:2b:62:15:ae:8b:40:ad:4e:e0:4e:
                    b6:44:06:1b:31:40:6f:21:03:6f:2a:49:96:e0:de:
                    b5:9d:40:38:1a:78:6f:a0:d5:e9:db:ff:1d:74:c7:
                    1b:ac:e1:81:87:2f:91:ee:bc:d8:7a:1a:e9:45:40:
                    44:dd:15:04:ae:bf:74:97:3d:2b:e0:2d:54:77:28:
                    22:d4:11:af:a0:ce:5d:85:87:fe:8c:5a:e5:b3:66:
                    09:4b:b4:59:05:66:60:2a:27:50:e6:9d:ad:17:25:
                    1d:5a:73:b4:20:01:3f:1e:43:96:ab:35:d9:a9:c1:
                    88:bb:25:df:12:6b:30:0c:64:37:ca:33:f4:75:6a:
                    6f:70:1a:02:f3:5d:66:d2:e3:e3:38:7f:5f:8f:d3:
                    ce:d7:bc:d0:76:25:6d:fa:6f:a2:20:c2:de:d8:f4:
                    c9:98:f3:44:6a:de:f6:39:14:8d:58:4e:17:4c:86:
                    ca:35:8c:38:0a:48:de:98:24:21:fb:b8:54:f0:bc:
                    06:be:eb:9b:da:60:94:4d:19:7f:9f:ed:04:8a:4d:
                    f1:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:57:3E:5C:C2:03:7B:62:C2:CD:9E:73:EB:F8:38:79:CC:70:92:78
            X509v3 Authority Key Identifier:
                keyid:BD:FA:3A:F8:39:AA:1D:CE:75:8F:48:9E:2D:31:AE:22:09:2F:C9:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vfo6-DmqHc51j0ieLTGuIgkvyZo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/8cdbc5-9365-4a0c-b9a3-ae7746f09630/1/vfo6-DmqHc51j0ieLTGuIgkvyZo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/8cdbc5-9365-4a0c-b9a3-ae7746f09630/1/vfo6-DmqHc51j0ieLTGuIgkvyZo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:26:fc:ec:d0:96:21:e7:24:79:30:e1:1e:a9:27:e0:1e:91:
         89:97:bb:03:c0:24:5e:e5:e0:d5:33:ed:3c:03:d8:e5:bc:91:
         f4:18:92:59:b5:4e:93:75:79:df:b8:0b:fe:37:ec:e5:73:5f:
         20:3a:85:27:37:ca:5d:c6:ce:cf:e2:a9:fb:e6:8b:1b:53:20:
         8c:a1:a9:92:6b:70:99:2e:df:ee:49:9e:b1:b8:fd:75:de:ac:
         4e:49:d3:5d:d6:c9:94:bd:af:78:f6:19:91:6d:eb:b3:46:36:
         e7:6c:06:75:57:9f:cd:7d:a9:6b:be:52:3e:c9:10:16:08:cf:
         ea:f9:7b:6c:27:fe:56:f5:a1:31:11:b6:d6:e2:87:2f:ec:d1:
         af:89:7f:df:95:9b:f4:a4:03:6f:da:0e:63:46:81:df:d6:1d:
         68:c9:8e:bc:ee:de:23:d5:46:c2:43:ad:0e:a3:78:85:ab:a9:
         91:72:15:86:0a:2f:69:94:fb:80:3f:38:6e:ce:32:9f:93:33:
         bf:61:5a:e1:ac:43:ba:c2:1f:ab:b4:30:d7:a3:83:5b:be:42:
         6d:81:b8:36:db:16:11:60:ac:48:3a:01:6e:00:b1:20:ac:55:
         b7:ad:b0:5b:bb:28:59:d4:6c:b8:90:c3:90:75:34:87:0f:b1:
         98:fd:6a:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 24 06:04:22 2025 by rpki-client